Commit Graph

2025 Commits (b7ed261e7dfd367f3bc5a8bef654b91ba74feb97)

Author SHA1 Message Date
Matthew Wild b7ed261e7d mod_http_files: Santize the path relative to our base URL before translating it to a filesystem path, fixes a relative path traversal vulnerability 10 years ago
Matthew Wild c10f3e22dd mod_admin_telnet: Backport 06696882d972 from 0.10 (this command greatly helps with debugging HTTP issues) 10 years ago
Matthew Wild 1580f84bd4 MUC: Fix incorrect nesting of status codes when room config changes (fixes #579) 10 years ago
Matthew Wild 5560527af8 muc.lib: Fix pattern so that it doesn't match hashes containing null bytes, causing dropped stanzas (thanks Jitsi folk!) 10 years ago
Kim Alvefur b7b28af321 mod_http_files: Translate forward slashes to local directory separators 10 years ago
Kim Alvefur 38b909e686 mod_http_files: Strip trailing directory separator regardless of directionality of the slash (fixes #545) 10 years ago
Matthew Wild 28d21c104a mod_pep: Don't store contacts' subscriptions to a user's nodes when that user is offline 10 years ago
Matthew Wild 9b76a57d58 mod_pep: Document data structures, so I don't have to spend time remembering every time I work on this module 11 years ago
Kim Alvefur 5243ae5fee mod_component: Fire an event on successful component authentication (For Goffi) 11 years ago
Kim Alvefur 48c1abdc57 MUC: Prevent admins from being given affiliatons other than owner 11 years ago
Kim Alvefur 3c7887b6fb Backed out changeset bea3862b6bde in favor of a different approach 11 years ago
Kim Alvefur e5b985792d MUC: Remove half of monkeypatch that was supposed to make admins always be room owners, fixes #458 11 years ago
Kim Alvefur bbdd807af4 mod_s2s: Mark stream as opened directly after opening stream, prevents session.close opening it again 11 years ago
Kim Alvefur edfc34c0fb mod_s2s: Don't cache session.sends2s (or do it later), prevents sending data after session was closed 11 years ago
Kim Alvefur 8057766c7f mod_s2s/s2sout: Use the local address assigned to UDP sockets instead of util.net to enumerate possible source addresses 11 years ago
Kim Alvefur 250115f542 mod_s2s/s2sout: Remove now unused config option dns_max_depth 11 years ago
Kim Alvefur f458d7b46d net.dns, mod_s2s: Add chasing of CNAMEs to net.dns and remove it from mod_s2s 11 years ago
Matthew Wild c8cfb78d7e mod_s2s: to/from attributes are required on s2s stream headers. Set them to '' when not available. Fixes #468. 11 years ago
Kim Alvefur 54b9ab1ce4 mod_http: Return a static string from module:http_url() when no ports are enabled and log a warning 11 years ago
Kim Alvefur e1988edd2e mod_http: Log a debug message when adding new http apps and warn if no http ports are enabled 11 years ago
Kim Alvefur 833a34dd65 Backout 7726b627c3ea 11 years ago
Matthew Wild 9f9a4c8e6c mod_http: Log event name when adding a HTTP app's hooks 11 years ago
Matthew Wild 33ca1a1111 mod_admin_telnet: Require util.pposix (fixes #471) 11 years ago
Matthew Wild 4a4ec58c8d mod_pubsub: Fix error type of 'forbidden' (change from 'cancel' to 'auth') 11 years ago
Kim Alvefur aa9e7abd10 mod_s2s: Capitalize log message 11 years ago
Kim Alvefur 7925cb6602 mod_admin_adhoc: Add required to field in user deletion form too 11 years ago
Kim Alvefur 64e9f25e6c mod_admin_adhoc: Mark 'accountjids' field as required in 'end user sessions' command (thanks Lloyd) 11 years ago
Matthew Wild 58edf57b1f net.http, net.http.server, mod_c2s, mod_s2s, mod_component, mod_admin_telnet, mod_net_multiplex: Add ondetach to release connection from 'sessions' table (or equivalent) 12 years ago
Kim Alvefur 84a056c50b mod_s2s: Close offending s2s streams missing an 'id' attribute with a stream error instead of throwing an unhandled error 12 years ago
Matthew Wild 1822bfc7e5 mod_privacy: Fix to correctly sort privacy list rules by order (thanks Flow) 12 years ago
Matthew Wild d2e9a31bf5 mod_c2s, mod_s2s: Log received invalid stream headers 12 years ago
Kim Alvefur 9736855cd3 mod_s2s: Reset stream ID when resetting stream [compliance] 12 years ago
Kim Alvefur cab2148453 mod_s2s: Mark stream as opened earlier for outgoing connections, fixes double stream headers on policy failures 12 years ago
Kim Alvefur 6c2e0aa223 mod_compression: Handle compression setup errors by logging a warning about it (fixes #408) 12 years ago
Kim Alvefur 1cff581359 mod_posix: Make sure that 'pidfile' is a string 12 years ago
Kim Alvefur b9134d61df mod_admin_telnet: Fix dns:(add,set)nameservers() 12 years ago
Kim Alvefur 9398ba77f3 mod_register: get_child_text! (thanks Lloyd) 12 years ago
Kim Alvefur ba692ae097 mod_c2s: Fix traceback if c2s stream sent to component 12 years ago
Matthew Wild f3e3081f4f mod_admin_telnet: muc:*: Fix nil index error when a room JID is passed with a non-existent host 12 years ago
Waqas Hussain 55a6ec25f6 MUC: Fixed traceback when a JID not in a room requested a role change for an occupant. 12 years ago
Kim Alvefur e56d4ee7d7 mod_saslauth: Only do c2s SASL on normal VirtualHosts 12 years ago
Kim Alvefur a8869fb516 mod_http_files: Strip path separator from end of paths, was broken on Windows (thanks Junne) 12 years ago
Kim Alvefur 9ff00bc616 mod_http: Fix http_external_url setting without an explicit port 12 years ago
Kim Alvefur b6d6861ec7 mod_http: Use hostname from the correct context (thanks gryffus) 12 years ago
Kim Alvefur ae1765b100 mod_compression: Only allow compression on authenticated streams 12 years ago
Waqas Hussain 55c5360d01 mod_auth_anonymous: Fixed a traceback in listing all users (issue#396). 12 years ago
Kim Alvefur d624e1a07c mod_admin_telnet: Prep jids for user:create() etc. 12 years ago
Kim Alvefur 3343d921c7 mod_s2s: Log a warning if no local addresses are found, as this breaks s2sout 12 years ago
Kim Alvefur 279b6cb27f mod_motd: Strip indentation only, leave multiple newlines 12 years ago
Kim Alvefur 5b7954b21f MUC: Fire muc-room-destroyed event when the last participant leaves a non-persistent room 12 years ago